SA-2 Allocation of Resources
Description
The University determines, documents, and allocates as part of its capital planning and investment control process, the resources required to adequately protect information resources.
Applicability
- The University is responsible for ensuring that all requirements of this Control are satisfied.
Implementation
-
1 - In accordance with Texas Administrative Code §202.70, the University is responsible for:
- 1.1 - Determining information security requirements for information resources or service in the business process planning;
- 1.2 - Determining, documenting, and allocating the resources required to protect information resources or services as part of the capital planning and investment control process: and
- 1.3 - Establishing a discrete line item for information security in university programming and budgeting documentation.